Update dependencies

Author: krusche

client/pnpm-lock.yaml

@@ -25,3 +25,7 @@ overrides:
   picomatch@<4: 2.3.2
   picomatch@>=4: 4.0.4
   fork-ts-checker-webpack-plugin>schema-utils: 4.3.3
+  # GHSA-q8mj-m7cp-5q26
+  qs@<6.15.2: 6.15.2
+  # GHSA-58qx-3vcg-4xpx
+  ws@>=8.0.0 <8.20.1: 8.20.1

client/pnpm-workspace.yaml

@@ -1 +1 @@
-a942f2787e67fef9d418edd23d750c17de29a3863705c722e9e2a2cdd8cab2be
+d7d204efeca702dd5b32b9cf486e36f879c045675f8dcdbe3af008b635778f52

client/sbom/.lock-hash

@@ -14980,17 +14980,17 @@
     {
       "type": "library",
       "name": "qs",
-      "version": "6.15.1",
-      "purl": "pkg:npm/qs@6.15.1",
-      "bom-ref": "pkg:npm/qs@6.15.1",
+      "version": "6.15.2",
+      "purl": "pkg:npm/qs@6.15.2",
+      "bom-ref": "pkg:npm/qs@6.15.2",
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
+          "url": "https://registry.npmjs.org/qs/-/qs-6.15.2.tgz",
           "hashes": [
             {
               "alg": "SHA-512",
-              "content": "e981c41512fd99f81c02faa5fd78704ef7f98ca70e8a2ba9b761622711e4897d73e23ed62fc27f8d11d82e5b8e46f7355f1079ad5db42a878ad3481525a9aca6"
+              "content": "473ab4284c97ff0fed1326e770381d919ac981552c50c937c63877b796efdd2d474c0b60fae398b7bdbe65fc2243029dcac4e191305d2ffad38ba1c3997f4377"
             }
           ]
         }
@@ -18172,17 +18172,17 @@
     {
       "type": "library",
       "name": "ws",
-      "version": "8.20.0",
-      "purl": "pkg:npm/ws@8.20.0",
-      "bom-ref": "pkg:npm/ws@8.20.0",
+      "version": "8.20.1",
+      "purl": "pkg:npm/ws@8.20.1",
+      "bom-ref": "pkg:npm/ws@8.20.1",
       "externalReferences": [
         {
           "type": "distribution",
-          "url": "https://registry.npmjs.org/ws/-/ws-8.20.0.tgz",
+          "url": "https://registry.npmjs.org/ws/-/ws-8.20.1.tgz",
           "hashes": [
             {
               "alg": "SHA-512",
-              "content": "b00b7c06180d6f30ad8066edd8ec66a6eaf23badd9a0393fb2a681ff39d09bde13e1f084b32ff257eec2742d64261394f656e800453b47792abaec9c0e889b54"
+              "content": "22de1d3b42b9bfffc9b535ee3e47c439a237b9437cee260f9eaa3f673a82a06de0f2e840eba41432cfd2accd182bbfcd02efabe0b321ffd76ad80ee4fab1ecfb"
             }
           ]
         }
@@ -20696,7 +20696,7 @@
         "pkg:npm/parseurl@1.3.3",
         "pkg:npm/path-to-regexp@0.1.13",
         "pkg:npm/proxy-addr@2.0.7",
-        "pkg:npm/qs@6.15.1",
+        "pkg:npm/qs@6.15.2",
         "pkg:npm/range-parser@1.2.1",
         "pkg:npm/send@0.19.2",
         "pkg:npm/serve-static@1.16.3",
@@ -22298,7 +22298,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/qs@6.15.1",
+      "ref": "pkg:npm/qs@6.15.2",
       "dependsOn": [
         "pkg:npm/side-channel@1.1.0"
       ]
@@ -23193,7 +23193,7 @@
         "pkg:npm/html-escaper@3.0.3",
         "pkg:npm/opener@1.5.2",
         "pkg:npm/sirv@3.0.2",
-        "pkg:npm/ws@8.20.0"
+        "pkg:npm/ws@8.20.1"
       ]
     },
     {
@@ -23332,7 +23332,7 @@
       "dependsOn": []
     },
     {
-      "ref": "pkg:npm/ws@8.20.0",
+      "ref": "pkg:npm/ws@8.20.1",
       "dependsOn": []
     },
     {

client/sbom/bom.json

@@ -18,6 +18,10 @@ description = "Thesis Management"
 
 // Override Spring Boot-managed Tomcat to pull in security fixes ahead of the next BOM release.
 ext["tomcat.version"] = "11.0.22"
+// Override Spring Boot-managed Netty to pick up fixes for GHSA-mj4r-2hfc-f8p6,
+// GHSA-cm33-6792-r9fm, GHSA-2c5c-chwr-9hqw, GHSA-45q3-82m4-75jr, GHSA-rwm7-x88c-3g2p,
+// and the netty-codec-http advisories (GHSA-38f8-5428-x5cv, GHSA-57rv-r2g8-2cj3, GHSA-f6hv-jmp6-3vwv, ...).
+ext["netty.version"] = "4.2.13.Final"
 
 gitProperties {
     // The plugin walks up from the project dir to auto-detect the .git
@@ -128,6 +132,17 @@ dependencies {
 	testRuntimeOnly "org.junit.platform:junit-platform-launcher:${junit_version}"
 }
 
+// Force a non-vulnerable plexus-utils across all configurations (Checkstyle's Doxia pulls in 3.3.0,
+// which is affected by GHSA-6fmv-xxpf-w3cw).
+configurations.configureEach {
+	resolutionStrategy.eachDependency { details ->
+		if (details.requested.group == "org.codehaus.plexus" && details.requested.name == "plexus-utils") {
+			details.useVersion("3.6.1")
+			details.because("GHSA-6fmv-xxpf-w3cw")
+		}
+	}
+}
+
 springBoot {
 	buildInfo()
 }

server/build.gradle

@@ -1 +1 @@
-d24142a26cd228d759867102be17b41ec80bb6e92f12a0a73c73b9e1d0a1eefe
+a548116454fcdcedfdfb9edc68a8ea9bfe5fd764922b3ed5247255188bac5291